\^ 2. (New) A method of verifying that a server is authorized to provide resources to a 

\ 

client, tfts^method comprising acts of: 

X^enerating a server authentication request at the client; 
transmitting the server authentication request to the server; 
receiving^an encrypted server authentication response from the server; 
decrypting the server authentication response; and 

disabling one or rnore client functions unless the server authentication response 
indicates that the server is autWized to provide at least one resource to the client. 

\ 



3. (New) A method as recited in cia\m 2, further comprising an act of activating one 

\ 

or more functions of the client if the server authentication response indicates that the server is 
authorized to provide at least one resource to the client. \ 



4. (New) A method as recited in claim 2, further comprising an act of waiting to 
disable the one or more functions until after a grace period. 
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\ 5. (New) A method as recited in claim 2, further comprising acts of periodically: 
\ generating one or more subsequent server authentication requests at a client; 

\ transmitting the one or more subsequent server authentication requests to one or 
more subsequent servers; 

foV each of the one or more subsequent server authentication requests, receiving a 
subsequent encrypted server authentication response; 

decrypting each subsequent server authentication response; and v 
for each of the one or more subsequent server authentication responses, disabling 
one or more client functions when a response fails to indicate that a subsequent server is 
authorized to provide at least one resource to the client. 

\ 

6. (New) A method as recited in claim 5, wherein at least one server authentication 

\ 

\ 

response comprises expiration information, i^e method further comprising an act of determining 
when at least one subsequent authenticationVequest should occur based on the expiration 



information. \ 

\ 

\ 



7. (New) A method as recited in claim 2, wherein the server authentication request 

\ 

\ 

comprises an encryption key and a random number, the method further comprising an act of 
encrypting the server authentication request. ^ 
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L (New) A method of verifying that a server is authorized to provide resources to a 
client, the ms^hod comprising acts of: 

generating a server authentication request at the client; 
transmitting the server authentication request to the server; 
after an allotted period of time, determining that no response to the server 
authentication request ha^been received by the client; 

interpreting no response as an indication that the server is not authorized to 
provide resources to the client; and 

disabling one or more client fimdtions. 



9. (New) A method as recited in claim 8, farther comprising an act of waiting to 
disable the one or more functions until after a grace period. 
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10. (Ne^) A method as recited in claim 8, further comprising acts of periodically: 
generating one or more subsequent server authentication requests at a client; 
transmitting the one or more subsequent server authentication requests to one or 
more subsequentWvers; 

for each of the one or more subsequent server authentication requests, receiving a 
subsequent encrypted server authentication response; 

decrypting each subsequent server authentication response; and 

for each of the one or nwe subsequent server authentication responses: 

disabling one or mbre client functions when a response fails to indicate 
that a subsequent server is authorized to provide at least one resource to the client; 
and 

activating one or more clientVunctions when a response indicates that the 
server is authorized to provide at least one resource to the client. 



1 1 . (New) A method as recited in claim 10, wherein at least one server authentication 
response comprises expiration information, the method further comprising an act of determining 
when at least one subsequent authentication request should oc^ur based on the expiration 
information. 
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(New) A computer program product for implementing a method of verifying that 
a server isWthorized to provide resources to a client, the computer program product comprising 
a computer readable medium carrying computer executable instructions that implement the 
method, whereifkthe method comprises acts of: 

generating a server authentication request at the client; 
transmitting the server authentication request to the server; 
^ receiving an encrypted server authentication response from the server; 

decrypting tnb server authentication response; and 

disabling one or\more client functions unless the server authentication response 

\ 

indicates that the server is cfythorized to provide at least one resource to the client. 

13. (New) A computer program product as recited in claim 12, the method further 
comprising an act of activating one or more functions of the client if the server authentication 
response indicates that the server is authorized to provide at least one resource to the client. 



14. (New) A computer program product^ recited in claim 12, the method further 

\ 

comprising an act of waiting to disable the one or more fynctions until after a grace period. 
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15. (New) A computer program product as recited in claim 12, the method further 
comprising acts of periodically: 

generating one or more subsequent server authentication requests at a client; 
ransmitting the one or more subsequent server authentication requests to one or 
more subsequent servers; 

for each of the one or more subsequent server authentication requests, receiving a 
subsequent encrypted server authentication response; 

decrypting \ach subsequent server authentication response; and 
for each of theyone or more subsequent server authentication responses, disabling 
one or more client functions when a response fails to indicate that a subsequent server is 
authorized to provide at least one resource to the client. 



16. (New) A computer program product as recited in claim 15, wherein at least one 
server authentication response comprises expiration information, the method further comprising 
an act of determining when at least one subsequent authentication request should occur based on 
the expiration information. 



17. (New) A computer program product asVecited in claim 12, wherein the server 
authentication request comprises an encryption key and asrandom number, the method further 
comprising an act of encrypting the server authentication requW. 



Page 7 



18. (JNew) A computer program product for implementing a method of verifying that a 
server is authored to provide resources to a client, the computer program product comprising a 
computer readabl^ medium carrying computer executable instructions that implement the 
method, wherein the ri^thod comprises acts of: 

generating^ server authentication request at the client; 
transmitting tn& server authentication request to the server; 

after an allotted period of time, determining that no response to the server 
authentication request has been received by the client; 

interpreting no response^as an indication that the server is not authorized to 
provide resources to the client; and 

disabling one or more client functions. 



19. (New) A computer program product as recited in claim 18, the method further 
comprising an act of waiting to disable the one or more functfyns until after a grace period. 
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(New) A computer program product as recited in claim 18, the method further 
compri singlets of periodically: 

generating one or more subsequent server authentication requests at a client; 
transmitting the one or more subsequent server authentication requests to one or 
more subsequent servers; 

for each of the one or more subsequent server authentication requests, receiving a 
subsequent encrypted server authentication response; 

decrypting each^ubsequent server authentication response; and 
for each of the one^or more subsequent server authentication responses: 

disabling oneVr more client functions when a response fails to indicate 
that a subsequent server^ authorized to provide at least one resource to the client; 
and 

activating one or moreVlient functions when a response indicates that the 



server is authorized to provide at least one resource to the client. 

\ 

\ 

21. (New) A computer program product a? recited in claim 20, wherein at least one 

\ 

server authentication response comprises expiration information, the method further comprising 

\ 

an act of determining when at least one subsequent authentication request should occur based on 

\ 

the expiration information. \ 
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